Results 1 to 6 of 6

Thread: Driver Tracing

  1. #1

    Driver Tracing

    I want to analyse the code of a driver that gets 'called' within another program via Kernel32-DeviceIOControl function.

    First I tried to trace the DeviceIOControl-function until it calls the driver routine, but apparently there is lots of Windows-code before the driver-code is actually called.

    I have no idea about this driver stuff, but since Windows knows the address of the driver routine I was wondering if there is an easy way to obtain the address, maybe directly from the driver file?

    Best regards

  2. #2

  3. #3
    Oh yes...

    Thanks a lot

  4. #4
    son of Bungo & Belladonna bilbo's Avatar
    Join Date
    Mar 2004
    ...and to make some practice after all that nice theory...

    (by the way, I have just added IRP Tracker... I hope I wasn't wrong...)

    Best regards, bilbo
    Non quia difficilia sunt, non audemus, sed quia non audemus, difficilia sunt.[Seneca, Epistulae Morales 104, 26]

  5. #5
    Teach, Not Flame Kayaker's Avatar
    Join Date
    Oct 2000
    Blog Entries
    Thanks for adding that Bilbo

  6. #6
    Had to chuckle.

    My tired eyes originally read the Tread Title as: "Driver Training."

    Boy that was a LOOOONG time ago for me.

    Carry on, pardon the sidetrack.


Similar Threads

  1. Kernel Tracing
    By t321 in forum Advanced Reversing and Programming
    Replies: 1
    Last Post: September 17th, 2012, 15:57
  2. Tracing into IIS
    By mashedpatatas in forum The Newbie Forum
    Replies: 2
    Last Post: March 19th, 2003, 11:37
  3. Tracing to log file??
    By homunculus in forum OllyDbg Support Forums
    Replies: 1
    Last Post: February 5th, 2003, 00:53
  4. Dead Tracing
    By Bardiche in forum Advanced Reversing and Programming
    Replies: 4
    Last Post: December 20th, 2001, 09:44
  5. Tracing into Dll's?
    By Argoth in forum Malware Analysis and Unpacking Forum
    Replies: 4
    Last Post: January 22nd, 2001, 16:35


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts